Skip to content

chore: upgrade Node.js to 22.22.0 for security fix (reown-com#5469) #920

Merged
Dargon789 merged 0 commit intoDargon789:fix-flag-appkitfrom
reown-com:main
Mar 18, 2026
Merged

chore: upgrade Node.js to 22.22.0 for security fix (reown-com#5469) #920
Dargon789 merged 0 commit intoDargon789:fix-flag-appkitfrom
reown-com:main

Conversation

@Dargon789
Copy link
Copy Markdown
Owner

Description

Please include a brief summary of the change.

Type of change

  • Chore (non-breaking change that addresses non-functional tasks, maintenance, or code quality improvements)
  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)

Associated Issues

For Linear issues: Closes APKT-xxx
For GH issues: closes #...

Showcase (Optional)

If there is a UI change include the screenshots with before and after state.
If new feature is being introduced, include the link to demo recording.

Checklist

  • Code in this PR is covered by automated tests (Unit tests, E2E tests)
  • My changes generate no new warnings
  • I have reviewed my own code
  • I have filled out all required sections
  • I have tested my changes on the preview link
  • Approver of this PR confirms that the changes are tested on the preview link

@bolt-new-by-stackblitz
Copy link
Copy Markdown

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

@codesandbox
Copy link
Copy Markdown

codesandbox bot commented Mar 17, 2026

Review or Edit in CodeSandbox

Open the branch in Web EditorVS CodeInsiders

Open Preview

Copy link
Copy Markdown

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry @Dargon789, your pull request is larger than the review limit of 150000 diff characters

@mergify
Copy link
Copy Markdown

mergify bot commented Mar 17, 2026

⚠️ The sha of the head commit of this PR conflicts with #421. Mergify cannot evaluate rules on this PR. Once #421 is merged or closed, Mergify will resume processing this PR. ⚠️

@snyk-io
Copy link
Copy Markdown

snyk-io bot commented Mar 17, 2026

Snyk checks have failed. 2 issues have been found so far.

Status Scan Engine Critical High Medium Low Total (2)
Open Source Security 0 1 1 0 2 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@gemini-code-assist
Copy link
Copy Markdown

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request significantly enhances the AppKit SDK by upgrading the Node.js runtime for security and integrating full support for the TRON blockchain. It also refines wallet fetching capabilities with more granular control, improves the consistency of account and network state serialization, and addresses mobile deeplink issues for Phantom wallet on Android. Additionally, the PR includes various dependency updates and comprehensive documentation additions to streamline development and understanding of the SDK's structure and usage.

Highlights

  • Node.js Upgrade: Upgraded Node.js to version 22.22.0 in the Dockerfile for enhanced security.
  • TRON Blockchain Integration: Introduced comprehensive support for the TRON blockchain across the AppKit SDK, including new adapter, network definitions, UI components, and testing utilities.
  • Dependency Updates: Updated various @walletconnect/* and viem dependencies across multiple packages and examples to their latest versions.
  • Wallet Fetching Enhancements: Expanded the fetchWallets method in useAppKitWallets to support additional filtering options such as entries, badge, include, and exclude.
  • Account and Network State Serialization: Improved the serialization of CAIP addresses and chain IDs into allAccounts across adapters and hooks for more consistent state management.
  • Mobile Deeplink Fix for Phantom: Implemented a fix for Phantom wallet deeplinks on Android devices by utilizing Android intent URLs, addressing reliability issues with Universal Links on certain browsers.
  • Coinbase and Base Account Connector Handling: Refined the logic for handling Coinbase Wallet and Base Account connectors, treating them as distinct popup-based connectors and ensuring proper initialization and configuration.
  • Documentation Updates: Added extensive documentation for architecture, contributing guidelines, controllers, packages, testing, and UI components within the .agents/context directory and AGENTS.md.
Changelog
  • @reown/appkit
    • Adds more options to fetchWallets method on useAppKitWallets
    • Fixes issue where mobile connections failing would not set wcError
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-adapter-bitcoin
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-adapter-ethers
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-adapter-ethers5
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-adapter-solana
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-adapter-ton
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-adapter-tron
    • New package for TRON blockchain support.
  • @reown/appkit-adapter-wagmi
    • Adds more options to fetchWallets method on useAppKitWallets
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-cdn
    • Adds more options to fetchWallets method on useAppKitWallets
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-cli
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-codemod
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-common
    • Adds more options to fetchWallets method on useAppKitWallets
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-controllers
    • Adds more options to fetchWallets method on useAppKitWallets
    • Fixes issue where mobile connections failing would not set wcError
    • Serializes caip address and chain Id into allAccounts
    • Fix: use Android intent URL for Phantom deeplinks on Android devices
  • @reown/appkit-experimental
    • Adds more options to fetchWallets method on useAppKitWallets
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-pay
    • Adds more options to fetchWallets method on useAppKitWallets
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-polyfills
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-scaffold-ui
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-siwe
    • Adds more options to fetchWallets method on useAppKitWallets
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-siwx
    • Adds more options to fetchWallets method on useAppKitWallets
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-testing
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-ui
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-universal-connector
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-utils
    • Adds more options to fetchWallets method on useAppKitWallets
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-wallet
    • Serializes caip address and chain Id into allAccounts
  • @reown/appkit-wallet-button
    • Serializes caip address and chain Id into allAccounts
Activity
  • This pull request is a chore, addressing non-functional tasks, maintenance, and code quality improvements.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request primarily introduces support for the TRON blockchain by adding a new TRON adapter and updating various components and configurations. It also includes a significant and beneficial refactoring to standardize account object creation around CAIP addresses, enhancing consistency across different blockchain adapters. Additionally, it addresses a security vulnerability by upgrading the Node.js version and includes several other fixes and improvements, such as better error handling for WalletConnect and improved Android deeplink handling for Phantom wallet. My review focuses on the new TRON provider implementation. The changes are well-structured and improve the codebase's maintainability and correctness.

@Dargon789
Copy link
Copy Markdown
Owner Author

@Mergifyio rebase

@mergify
Copy link
Copy Markdown

mergify bot commented Mar 18, 2026

rebase

☑️ Nothing to do, the required conditions are not met

Details
  • -conflict [📌 rebase requirement]
  • -closed [📌 rebase requirement]
  • queue-position = -1 [📌 rebase requirement]
  • any of:
    • #commits-behind > 0 [📌 rebase requirement]
    • -linear-history [📌 rebase requirement]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

updated useAppKitWallets hook and return type **Review the following changes in direct dependencies.**

1 participant